| cfhbddf.r.bh.d.sendibt3.com/tr/cl/1f73Y2yEBoFGLeW_LXT8gWbGjbujoFJbkHygv3sUThNxlAiiMWp5pbUIn-z-9Qc2k2qT4CsdfSILDufi79dsnqeHyEbGMvuVAenqRuG2F4I_y_xa63ktAlOAkeMAFn7_AGQuak5sCT3Oq9kKV7GJSGn8N7aIdhMPR8P_VKrS4gf8TFQ7cAw8Udc1n7o_4XnC9XfyOqxL_Z6guAwvmOEzRz3qMG-sR22_kmnUHNZTd-zHmc2H59ZMbx-FD6L8-tNBITuA7ANMuAuBZ2-qGIhzVas49ZrlqPkNGqazyzx25D_tknixseZ_ogNi_iTOQKmVesekm6VVbiheBUtGkENZLEFNQvXZY0NLsKbLugYbJj1QV6M2mQiHmHjAORJ1Pr0WLfKWmmwsuMvX0LJge6I66vsIhk4NvOk8umhNU4pqsknT_AhHSNGWdrLBWSSui6_grp9s5we_X7RGm6AkVabybG9N-tn05gGblb72-CeCwYfCi3uOg9i8YHbQe9NpYYU | 1.179.112.196 | 302 Found | 217 B |
URL User Request GET HTTP/2cfhbddf.r.bh.d.sendibt3.com/tr/cl/1f73Y2yEBoFGLeW_LXT8gWbGjbujoFJbkHygv3sUThNxlAiiMWp5pbUIn-z-9Qc2k2qT4CsdfSILDufi79dsnqeHyEbGMvuVAenqRuG2F4I_y_xa63ktAlOAkeMAFn7_AGQuak5sCT3Oq9kKV7GJSGn8N7aIdhMPR8P_VKrS4gf8TFQ7cAw8Udc1n7o_4XnC9XfyOqxL_Z6guAwvmOEzRz3qMG-sR22_kmnUHNZTd-zHmc2H59ZMbx-FD6L8-tNBITuA7ANMuAuBZ2-qGIhzVas49ZrlqPkNGqazyzx25D_tknixseZ_ogNi_iTOQKmVesekm6VVbiheBUtGkENZLEFNQvXZY0NLsKbLugYbJj1QV6M2mQiHmHjAORJ1Pr0WLfKWmmwsuMvX0LJge6I66vsIhk4NvOk8umhNU4pqsknT_AhHSNGWdrLBWSSui6_grp9s5we_X7RGm6AkVabybG9N-tn05gGblb72-CeCwYfCi3uOg9i8YHbQe9NpYYU IP1.179.112.196:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerLet's Encrypt Subject*.r.bh.d.sendibt3.com Fingerprint36:EF:B8:6B:23:53:24:1E:8B:8A:75:36:DD:19:23:28:71:CF:53:C8 ValidityFri, 19 Apr 2024 04:00:06 GMT - Thu, 18 Jul 2024 04:00:05 GMT
File typeHTML document, ASCII text Hash849ef628fedf5f23af58c11f74530bfb 765cdcd92d84490d14e0fdd6fa70fa61749836c1 38f69541c354298abe522cc9171d9683b147e26f34c9e030a89f9babe5e85d3c
GET /tr/cl/1f73Y2yEBoFGLeW_LXT8gWbGjbujoFJbkHygv3sUThNxlAiiMWp5pbUIn-z-9Qc2k2qT4CsdfSILDufi79dsnqeHyEbGMvuVAenqRuG2F4I_y_xa63ktAlOAkeMAFn7_AGQuak5sCT3Oq9kKV7GJSGn8N7aIdhMPR8P_VKrS4gf8TFQ7cAw8Udc1n7o_4XnC9XfyOqxL_Z6guAwvmOEzRz3qMG-sR22_kmnUHNZTd-zHmc2H59ZMbx-FD6L8-tNBITuA7ANMuAuBZ2-qGIhzVas49ZrlqPkNGqazyzx25D_tknixseZ_ogNi_iTOQKmVesekm6VVbiheBUtGkENZLEFNQvXZY0NLsKbLugYbJj1QV6M2mQiHmHjAORJ1Pr0WLfKWmmwsuMvX0LJge6I66vsIhk4NvOk8umhNU4pqsknT_AhHSNGWdrLBWSSui6_grp9s5we_X7RGm6AkVabybG9N-tn05gGblb72-CeCwYfCi3uOg9i8YHbQe9NpYYU HTTP/1.1
Host: cfhbddf.r.bh.d.sendibt3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 18:40:38 GMT
location: https://cdn.discordapp.com/attachments/1228272523003826199/1228298927791538206/FRS133.zip?ex=662b8985&is=66191485&hm=e96e3c227b13c85a358847a73c7ea14f644f9a655ac23d314921b4b78a97d19d&
x-content-type-options: nosniff
x-sib-server: gke-public-cluster-v2-1-179-112-142
x-xss-protection: 1
content-length: 217
X-Firefox-Spdy: h2
|
| cdn.discordapp.com/attachments/1228272523003826199/1228298927791538206/FRS133.zip?ex=662b8985&is=66191485&hm=e96e3c227b13c85a358847a73c7ea14f644f9a655ac23d314921b4b78a97d19d& | 162.159.135.233 | 200 OK | 17 kB |
URL User Request GET HTTP/2cdn.discordapp.com/attachments/1228272523003826199/1228298927791538206/FRS133.zip?ex=662b8985&is=66191485&hm=e96e3c227b13c85a358847a73c7ea14f644f9a655ac23d314921b4b78a97d19d& IP162.159.135.233:443
CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=deflate Hash2ec49bb38b1ec4317627695b1d9232da 6727f404031b1d365e98a752e0294f1141355a6b 1aed8e7cdebe6ec88893e290f9c0141234c94da422c5b422a7f624e44540cd5c
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /attachments/1228272523003826199/1228298927791538206/FRS133.zip?ex=662b8985&is=66191485&hm=e96e3c227b13c85a358847a73c7ea14f644f9a655ac23d314921b4b78a97d19d& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:40:38 GMT
content-type: application/zip
content-length: 16594
cf-ray: 8798390f39c356ab-OSL
cf-cache-status: MISS
accept-ranges: bytes, bytes
cache-control: public, max-age=31536000
content-disposition: attachment; filename="FRS133.zip"
etag: "2ec49bb38b1ec4317627695b1d9232da"
expires: Thu, 24 Apr 2025 18:40:38 GMT
last-modified: Fri, 12 Apr 2024 11:01:25 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1712919685169259
x-goog-hash: crc32c=rbtcIA==, md5=LsSbs4sexDF2J2lbHZIy2g==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 16594
x-guploader-uploadid: ABPtcPrDP8Pfgy0vGKyI3P6yZyuVKduAeYxi09WoWSg9Up6jHDCeGw7NR1oZQYaxVmPjE2PujfyvinztOQ
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LYkmmH84ycdZeY0CFNiEucyElIdOtNZ6rIuS3JZ%2FS7tYf2H1bFzo6JudkVMzMbokvochVJfCJnPPZ70BlRkcHtDU1P%2Fc2Gd%2FvHPHHt%2F7f7bCHGfz68AScEedUKRTw8cHLxU2dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=pBTaZES9kh8mhzL453fbX6dbXhCcGUGLZZkomcpMNhk-1713984038-1.0.1.1-DNt6P8j536KG_4STdkRmGCdTJgb6euaFeN.eHjwkwRXr2ASvLn9AK8Z_Ipcvz3EiLkRj2pA1L2xyQGx3cmEGtg; path=/; expires=Wed, 24-Apr-24 19:10:38 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=H28ZC9yXIG25iRqoEExsHERa1ScVfwQdyntN5vgi5tU-1713984038485-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|